The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: An automated scan flagged a pipe to python3 in SKILL.md. Technical analysis confirms this is python3 -m json.tool, a standard library module used solely for pretty-printing JSON output from the official Customer.io status API (https://status.customer.io/api/v2/status.json). This pattern is a benign formatting step and does not involve the execution of untrusted remote code.
[COMMAND_EXECUTION]: The skill provides standard curl commands for testing API connectivity and event delivery. These commands use local environment variables for credentials and target official Customer.io API endpoints, which is appropriate for a diagnostic skill.
[CREDENTIALS_UNSAFE]: The skill follows security best practices for secret management. It uses environment variable placeholders (e.g., $CUSTOMERIO_SITE_ID, $CUSTOMERIO_TRACK_API_KEY) and explicitly recommends using secret managers for rotation/revocation. No hardcoded credentials or private keys were found.
[EXTERNAL_DOWNLOADS]: The skill references official Customer.io documentation and repositories. The allowed-tools field includes npx, which is used for project-specific tooling, and references the standard customerio-node package. All external links point to verified service domains or the author's own professional websites (intentsolutions.io, jeremylongshore.com).

customerio-common-errors